MAL-2025-182598 Malicious code in imugay-avig-ijimamfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1220a8a7c027ad0cd4c14a1b330e82a51c106fd14f7a69964bd22c8839e72326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afiafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f72104ecc638c7860b19230e6cda4680c08394a78331dc68b53b6c8cb9077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a91ee02dfb78172eadebec4823ebb2d004f2366bd0d1ca6b60f80cc80831f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobasoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dabba80bc224b0c263a8900742caa87ab40eb9093228fabea666a2398b0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5260812eb13ff8ea62e327e3b7b45217c3f9b1c6646edd9a3cc0eb869a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-ddafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0178294d148922a29cd2d674a90023b67d1bdf7a7ab53f62ad56105bbc3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53fb2fceaedc62007a2ed69f01d766dd5aeb102ab8bf91ca84f15cb40ec46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e33c0c9e7e7b530d5c04ce3c629bd7a349cb4c161d5763b05653e8991e390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agufiaagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fae5c415bd2a68f4bd1155d61bdeef173b8e92d8ffb6b4b21acf7b9f0e23ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugilkfoabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d8e271f439812031adbc9e5e0eda6e52907d3fdbe7e9bc29f41989df28bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisio1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135c5cc13110f149097b0cc72ec43e9b1cf4eccd76d9c0f02750b77a1c5b5ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihn-afbaufcaducxabnycmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a66c3aa60d407c52581220a744dbfe87d960a979bc8d5ab02d4491add882900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogatatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bb27e127f60e7a75cecd65f0cf0004464bd4eb08cefea1d9bcdb126bedc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavauydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36c8c171a9c82155d81f432783f0b9f60e07fa49cb9e2d6cba3175da0df782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1aad346e15fe331b7fb58d6ecbf0f7470089a66e1d65e91c08f7ecfc2ed8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsuytt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7aff1adbeb9c162035ed3b3a8082a61a702282afdde809cf7032cf9f301692f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugafuafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533222ae155081c40bdd78be6e0b6c9adec0532261b333b9af4bff9fafbf7a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avnuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1cfd751600102e1fe0d6dab63258b878c417c7498f04ff2fdd0e8a93bd74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183573 Malicious code in lomi-fus-ufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f08929474537932dc80c444136c187398bdff543d264e0b503d48dd3e2c26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...